Configuration Procedure; Verifying The Configuration - HP 6600 Security Configuration Manual

Configuration procedure

1. Configure an IP address for each interface. (Details not shown.)
2. Configure the DHCP server:
# Enable DHCP.
<Router> system-view
[Router] dhcp enable
# Enable the DHCP server on VLAN interface 2.
[Router] interface vlan-interface 2
[Router-Vlan-interface2] dhcp select server global-pool
[Router-Vlan-interface2] quit
# Create DHCP address pool 0, specify a subnet for dynamic allocation in the pool, and specify
the gateway address.
[Router] dhcp server ip-pool 0
[Router-dhcp-pool-0] network 192.168.1.0 mask 255.255.255.0
[Router-dhcp-pool-0] gateway-list 192.168.1.1
[Router-dhcp-pool-0] quit
3. Configure a RADIUS scheme and an ISP domain.
For more information about configuration procedure, see
example."
4. Configure 802.1X:
# Configure the free IP.
[Router] dot1x free-ip 192.168.2.0 24
# Configure the redirect URL for client software download.
[Router] dot1x url http://192.168.2.3
# Enable 802.1X globally.
[Router] dot1x
# Enable 802.1X on the port.
[Router] interface gigabitethernet 3/0/1
[Router-GigabitEthernet3/0/1] dot1x

Verifying the configuration

Use the display dot1x command to display the 802.1X configuration. After the host obtains an IP address
from a DHCP server, use the ping command from the host to ping an IP address on the network segment
specified by free IP.
C:\>ping 192.168.2.3
Pinging 192.168.2.3 with 32 bytes of data:
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
"802.1X authentication configuration
111